Approved changes feed: RSS · Atom

cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorStormshield (66850321-be73-5e7a-822e-90c1836fd557)
ProductStormshield Network Security (d8c484f1-fca7-56fb-a7c2-565a0131dc06)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-113469 vulnerable 2026-11-03 10:16:27.983230 Improper Signature Verification of Active Update Files
HIGH (7.5)
A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine.
Published: 2026-10-20T08:29:49.095Z
Updated: 2026-10-20T18:08:00.762Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-113465 vulnerable 2026-11-03 10:16:27.662760 Possible DOM XSS in SNS Web Administration Portal
MEDIUM (6.6)
It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel. To exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter and lure an authenticated administrator into visiting that link.
Published: 2026-10-20T08:09:33.956Z
Updated: 2026-10-20T15:53:22.668Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-113810 vulnerable 2026-11-03 10:16:27.472762 Stored XSS on SNS Enrollment Portal
HIGH (7)
A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when requesting certificate creation for user. The stored XSS can only be triggered during validation by the administrator.
Published: 2026-10-20T18:31:35.708Z
Updated: 2026-10-20T18:47:12.554Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-113808 vulnerable 2026-11-03 10:16:27.463352 Stored XSS on SNS Enrollment Portal
HIGH (7.1)
A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when requesting user creation. The stored XSS can only be triggered during validation by the administrator.
Published: 2026-10-20T18:15:43.059Z
Updated: 2026-10-20T18:47:45.044Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-111090 vulnerable 2026-11-03 10:16:11.354679 Improper Signature Verification of Firmware Update Files
HIGH (7.8)
A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MyStormshield servers to retrieve update files or licenses, or to use automatic verification via SNS.
Published: 2026-10-20T07:42:53.842Z
Updated: 2026-10-20T19:13:40.735Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-111088 vulnerable 2026-11-03 10:16:11.300163 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8482 vulnerable 2026-07-29 01:09:05.908334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8480 vulnerable 2026-07-29 01:09:05.907941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8474 vulnerable 2026-06-08 08:08:58.385992 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48707 vulnerable 2026-06-08 07:29:11.150508 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37386 vulnerable 2026-06-08 06:39:47.377458 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47093 vulnerable 2026-06-08 06:14:23.918889 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47091 vulnerable 2026-06-08 06:14:23.918229 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41166 vulnerable 2026-06-08 06:11:05.463318 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41165 vulnerable 2026-06-08 06:11:05.462856 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34198 vulnerable 2026-06-08 06:06:24.874355 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28616 vulnerable 2026-06-08 06:01:14.588994 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26095 vulnerable 2026-06-08 05:57:38.598125 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20052 vulnerable 2026-06-08 05:52:38.500744 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20032 vulnerable 2026-06-08 05:52:38.201193 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0286 vulnerable 2026-06-08 05:52:04.689308 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4450 vulnerable 2026-06-08 05:51:59.506476 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4304 vulnerable 2026-06-08 05:51:37.167662 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40617 vulnerable 2026-06-08 05:48:27.722606 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37434 vulnerable 2026-06-08 05:47:12.887658 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30279 vulnerable 2026-06-08 05:43:37.826912 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27812 vulnerable 2026-06-08 05:42:43.359652 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23989 vulnerable 2026-06-08 05:40:59.469259 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3398 vulnerable 2026-06-08 05:33:51.258637 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3384 vulnerable 2026-06-08 05:33:51.241403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-37613 vulnerable 2026-06-08 05:32:54.475362 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31814 vulnerable 2026-06-08 05:31:53.964113 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31617 vulnerable 2026-06-08 05:31:53.778971 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28962 vulnerable 2026-06-08 05:31:25.290083 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28665 vulnerable 2026-06-08 05:31:24.734260 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28127 vulnerable 2026-06-08 05:31:22.975341 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28096 vulnerable 2026-06-08 05:31:22.934439 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27506 vulnerable 2026-06-08 05:31:21.726173 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8430 vulnerable 2026-06-08 05:27:16.520408 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7466 vulnerable 2026-06-08 05:27:13.133210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7465 vulnerable 2026-06-08 05:27:13.131177 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11711 vulnerable 2026-06-08 05:16:47.655493 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20850 vulnerable 2026-06-08 05:11:28.161536 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-20001 vulnerable 2026-06-08 04:47:18.819123 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.